1*dfc86c0fSAlexander Bulekov# Code that we actually want the fuzzer to target 2*dfc86c0fSAlexander Bulekov# See: https://clang.llvm.org/docs/SanitizerCoverage.html#disabling-instrumentation-without-source-modification 3*dfc86c0fSAlexander Bulekov# 4*dfc86c0fSAlexander Bulekovsrc:*/hw/* 5*dfc86c0fSAlexander Bulekovsrc:*/include/hw/* 6*dfc86c0fSAlexander Bulekovsrc:*/slirp/* 7*dfc86c0fSAlexander Bulekovsrc:*/net/* 8*dfc86c0fSAlexander Bulekov 9*dfc86c0fSAlexander Bulekov# We don't care about coverage over fuzzer-specific code, however we should 10*dfc86c0fSAlexander Bulekov# instrument the fuzzer entry-point so libFuzzer always sees at least some 11*dfc86c0fSAlexander Bulekov# coverage - otherwise it will exit after the first input 12*dfc86c0fSAlexander Bulekovsrc:*/tests/qtest/fuzz/fuzz.c 13*dfc86c0fSAlexander Bulekov 14*dfc86c0fSAlexander Bulekov# Enable instrumentation for all functions in those files 15*dfc86c0fSAlexander Bulekovfun:* 16